need a session constructor that takes both auth params and token

[Monty Taylor]

We need a constructor that allows for passing in an active token and normal auth parameters so that the token can be refreshed but the initial auth is not needed.

Most cases you will rely on a pre-constructed session that has performed an
auth, but there are cases where you will have an active token but not a session.

This will help with overall usability.

[Steve Martinelli (stevemar)]

a bit more details in the bug would help

[Colleen Murphy (krinkle)]

I would love to help with this but I would still like a bit more information.

You can already pass in both a token and password auth plugin, but I don't think that gets you what you want:

http://paste.openstack.org/show/495050/

If you just pass in a token, it will get a new one if it's about to expire:

http://git.openstack.org/cgit/openstack/keystoneauth/tree/keystoneauth1/identity/base.py?id=9d51a2ae6052dee46198ed3799365a6480cb42c4#n134

without needing a password auth plugin. Why is that not sufficient?

[Jamie Lennox (jamielennox)]

I think the bug is I have a token id that i got previously with these credentials and reuse it until it expires.

The problem with that is there is more information in a token than an id, you need to supply a full auth_ref[1] for things like the service catalog.

There is the ability in KSA to cache an auth_ref[2], this would allow you to reconstruct a complete auth object that can be reused until it expires and the refreshed. Where you save this is not dictated by KSA though i'd be happy to do like a keyring util function to standardize it - though this might be better in os-client-config.

To make use of this in openstackclient I'm just waiting for the transition to KSA to be complete.

I'm going to mark this incomplete without further information.

[1] https://github.com/openstack/keystoneauth/blob/118c9629e57f353aa49ba29c4b27e0e240788463/keystoneauth1/access/access.py#L64
[2] https://github.com/openstack/keystoneauth/blob/118c9629e57f353aa49ba29c4b27e0e240788463/keystoneauth1/plugin.py#L207-L252

[Launchpad Janitor (janitor)]

[Expired for keystoneauth because there has been no activity for 60 days.]